Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvSitEd1rBg3XNg00-khjSifY4Q.cer
File: CvSitEd1rBg3XNg00-khjSifY4Q.cer (raw, json)
Hash identifier: gdTodlgxlsBWRUyy1Az3NrwrsBOepiFc9GTe19jK164=
Subject key identifier: 0A:F4:A2:B4:47:75:AC:18:37:5C:D8:34:D3:E9:21:8D:28:9F:63:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9B86A9B400
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 02:54:39 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2.59.248.0/22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667979199488 (0x9b86a9b400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:54:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0af4a2b44775ac18375cd834d3e9218d289f6384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:4b:a0:a4:72:d2:17:d4:2b:3e:1c:57:9e:
33:d0:42:1c:23:01:ea:c4:81:08:e0:35:4e:d4:63:
ca:8d:26:20:4d:88:95:6f:f6:31:30:c9:a9:fe:1d:
d2:70:b3:48:9b:30:e4:56:99:78:ad:4b:cf:54:22:
83:87:a5:e3:2e:0a:45:6b:87:33:52:b0:17:1b:6c:
70:9e:a9:1b:55:7e:1e:2d:93:39:8a:da:f3:4f:b8:
12:0c:8a:4d:75:d1:40:b5:9c:7e:5c:82:3a:02:02:
c1:0f:3d:5c:b6:da:a1:f5:c1:22:cd:86:b7:6b:54:
7f:8f:b2:21:6e:39:33:53:6e:ed:63:51:75:7d:27:
02:e8:9e:07:f8:bf:81:52:29:62:26:4c:16:94:03:
43:73:51:62:39:dd:a0:06:4d:94:46:36:e7:90:f3:
d1:98:12:50:48:d6:f6:26:ad:98:47:dc:5c:32:9f:
8c:d0:b3:bd:c5:3a:3b:59:e5:db:98:d4:c3:1c:bd:
95:e9:5a:55:17:71:ad:01:e6:05:9b:ec:ba:ee:71:
f1:66:7f:59:b6:31:6e:4d:7c:74:31:eb:03:c2:d9:
a1:e4:e7:51:6f:e6:ed:3f:3c:71:76:84:1c:3d:77:
03:c2:6c:e7:5f:ee:0e:b2:1d:7d:59:e9:e1:68:d0:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:A2:B4:47:75:AC:18:37:5C:D8:34:D3:E9:21:8D:28:9F:63:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/bba89c-225f-4e61-bc57-45a5f56c86eb/1/CvSitEd1rBg3XNg00-khjSifY4Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.248.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f9:ee:b3:7f:4e:58:ef:a9:72:50:3e:58:5e:cf:7d:f3:b3:
89:e1:27:66:ac:da:33:cd:eb:ef:fb:53:76:ec:8d:14:75:12:
8c:2a:2f:c5:74:48:2c:e3:96:df:88:eb:ea:bc:0f:5a:c3:26:
24:ae:ed:96:fb:4b:d0:b7:30:d2:00:ac:4c:c8:93:44:e9:e5:
da:d4:23:fa:28:4e:44:63:bc:d4:ff:20:2f:a0:48:74:59:25:
8a:d5:04:b7:a3:42:63:03:7b:65:10:58:79:b2:81:01:5d:1e:
8c:43:d1:d8:2a:29:cb:71:ab:95:a2:c6:e2:a9:6a:90:b8:ae:
fd:c0:08:ab:69:35:86:3a:d9:11:21:09:4c:a0:c0:ac:9c:b7:
ea:d9:07:30:60:78:dc:49:b0:af:ce:94:6b:bc:35:f4:cc:22:
57:6a:8a:d7:67:7f:2c:f1:83:e0:15:c1:46:84:32:19:7c:d5:
c3:c1:47:44:2d:27:c0:8e:d2:88:fd:ef:8d:05:c8:45:18:de:
8d:cb:95:61:c0:5d:4f:a0:f0:b5:79:03:3d:da:84:d1:3f:6f:
5b:5e:53:eb:3a:69:39:c7:77:97:c1:ec:b1:18:60:c0:41:2b:
1c:de:59:b0:70:be:2e:56:88:9e:e3:d3:30:b7:20:ab:33:b9:
dd:0b:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-fra.rpki-client.org